Apparently, there is a new Twitter Direct Message (DM) Phishing scam being distributed at the moment.

I received a twitter Direct Message notification from a friend of ours via an email in our helpdesk tonight. According to the DM, our friend was warning that there was a “bad blog going around about you, seen it yet?”

Being the spam savvy guy that I am, I was suspicious of the “bad blog going around about you, seen it yet?” warning, but followed the link to see where it would take me.

I quickly confirmed that it was, indeed, a phishing scam. The URL wasn’t masked at all and rather than being displayed as twitter.com, showed twittelr.com/..

So, beware out there; and if you do get one of these suspicious DMs from someone you know, do them a solid, let them know that you received it and advise them to change their Twitter password.

You can find more information about this type of phishing attack and related security (and password) advice at Naked Security.